Lucene search
+L

3457 matches found

Vulnrichment
Vulnrichment
added 2024/05/03 2:15 a.m.33 views

CVE-2023-51596 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.4AI score0.01493EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/03 2:15 a.m.40 views

CVE-2023-51596 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.7AI score0.01493EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 2:15 a.m.202 views

CVE-2023-51596

CVE-2023-51596 refers to a heap-based buffer overflow in BlueZ’s Phone Book Access Profile that can lead to remote code execution with root privileges after a device connection to a malicious Bluetooth device. The flaw arises from improper validation of user-supplied data length before copying in...

7.1CVSS7.3AI score0.01493EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2024/05/03 2:15 a.m.54 views

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.3AI score0.01493EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.28 views

CVE-2023-50230 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.4AI score0.01493EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/05/03 2:14 a.m.60 views

CVE-2023-50230

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

8CVSS7.4AI score0.01493EPSS
SaveExploits0
OSV
OSV
added 2024/05/03 2:14 a.m.68 views

CVE-2023-50230 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.5AI score
SaveExploits0References5
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.62 views

CVE-2023-50230 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.4AI score0.01493EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.127 views

CVE-2023-50230

BlueZ CVE-2023-50230 is a heap-based overflow in the Phone Book Access profile that can allow remote code execution with root privileges when a network-adjacent attacker connects to a malicious Bluetooth device. The flaw arises from unchecked length while copying user data into a fixed-size heap ...

8CVSS7.2AI score0.01493EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/03 2:14 a.m.24 views

CVE-2023-50229 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.5AI score
SaveExploits0References5
CVE
CVE
added 2024/05/03 2:14 a.m.135 views

CVE-2023-50229

CVE-2023-50229 affects BlueZ PBAP heap-based buffer overflow. Affects BlueZ with PBAP handling; vulnerability allows remote code execution by network-adjacent attackers, requiring the target to connect to a malicious Bluetooth device. Some connected advisories indicate patches are available (e.g....

8CVSS7.1AI score0.0229EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2024/05/03 2:14 a.m.28 views

CVE-2023-50229

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

8CVSS7.5AI score0.0229EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.31 views

CVE-2023-50229 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.4AI score0.0229EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/05/03 12:00 a.m.20 views

WordPress Mooberry Book Manager Plugin <= 4.15.12 is vulnerable to Sensitive Data Exposure

Software Mooberry Book Manager Type Plugin Vulnerable versions = 4.15.12 Fixed in 4.15.13 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-34368 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8048e91588cf Credits Steven Julian...

5.3CVSS6.5AI score0.00461EPSS
SaveExploits0References2Affected Software1
Talos Blog
Talos Blog
added 2024/04/30 12:00 p.m.18 views

Cisco Talos at RSAC 2024

With RSAC just a week away, Cisco Talos is gearing up for another year of heading to San Francisco to share in some of the latest major cybersecurity announcements, research and news. Weve pulled together the highlights, so you dont miss out on all things Talos. Tuesday, May 7 Joe Marshall will b...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/04/29 5:15 a.m.11 views

CVE-2024-33648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through 1.66.0...

6.5CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2024/04/29 5:15 a.m.8 views

CVE-2024-33648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through 1.66.0...

6.5CVSS5.5AI score0.0037EPSS
SaveExploits0References4
NVD
NVD
added 2024/04/29 5:15 a.m.21 views

CVE-2024-33648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews recencio-book-reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through = 1.66.0...

6.5CVSS6.4AI score0.0037EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/29 4:54 a.m.22 views

CVE-2024-33648 WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through 1.66.0...

6.5CVSS5.4AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/29 4:54 a.m.32 views

CVE-2024-33648 WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews recencio-book-reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through = 1.66.0...

6.5CVSS6.6AI score0.0037EPSS
SaveExploits0References1
Rows per page
Query Builder